CVEvulnerability

CVE-2009-4019

4.0 MEDIUM Published 2009-11-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P

Description

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Affected configurations

• mysql mysql 5.0.0 • mysql mysql 5.0.1 • mysql mysql 5.0.2 • mysql mysql 5.0.3 • mysql mysql 5.0.4 • mysql mysql 5.0.5 • mysql mysql 5.0.5.0.21 • mysql mysql 5.0.10 • mysql mysql 5.0.15 • mysql mysql 5.0.16 • mysql mysql 5.0.17 • mysql mysql 5.0.20 • mysql mysql 5.0.22.1.0.1 • mysql mysql 5.0.24 • mysql mysql 5.0.30 • mysql mysql 5.0.36 • mysql mysql 5.0.44 • mysql mysql 5.0.54 • mysql mysql 5.0.56 • mysql mysql 5.0.60 • mysql mysql 5.0.66 • mysql mysql 5.0.82 • mysql mysql 5.1.5 • mysql mysql 5.1.23 • mysql mysql 5.1.32 • oracle mysql 5.0.0 • oracle mysql 5.0.3 • oracle mysql 5.0.6 • oracle mysql 5.0.7 • oracle mysql 5.0.8 • oracle mysql 5.0.11 • oracle mysql 5.0.12 • oracle mysql 5.0.13 • oracle mysql 5.0.14 • oracle mysql 5.0.18 • oracle mysql 5.0.19 • oracle mysql 5.0.21 • oracle mysql 5.0.22 • oracle mysql 5.0.23 • oracle mysql 5.0.25 • oracle mysql 5.0.26 • oracle mysql 5.0.27 • oracle mysql 5.0.30 • oracle mysql 5.0.32 • oracle mysql 5.0.33 • oracle mysql 5.0.37 • oracle mysql 5.0.38 • oracle mysql 5.0.41 • oracle mysql 5.0.42 • oracle mysql 5.0.45 • oracle mysql 5.0.50 • oracle mysql 5.0.51 • oracle mysql 5.0.51a • oracle mysql 5.0.52 • oracle mysql 5.0.75 • oracle mysql 5.0.77 • oracle mysql 5.0.81 • oracle mysql 5.0.83 • oracle mysql 5.1 • oracle mysql 5.1.1 … and 21 more

References